Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: FUEq5HPs52wcqly/WuQVTnLpjgjdIrw/htxFppRue5w=
Subject key identifier: 12:0B:FB:46:B3:13:E7:E7:C2:06:EF:9D:83:1A:8F:AB:07:C1:EF:09
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019699060C327C23EB6098D9437D4A48218F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0C9C
Signing time: Sun 04 May 2025 02:00:32 +0000
Manifest this update: Sun 04 May 2025 02:00:32 +0000
Manifest next update: Mon 05 May 2025 02:00:32 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: FI7xdAm9VeojIDjku09WGt9WrpUcWAwvXEufJK4lB3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:06:0c:32:7c:23:eb:60:98:d9:43:7d:4a:48:21:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: May 4 02:00:32 2025 GMT
Not After : May 5 02:00:32 2025 GMT
Subject: CN=120bfb46b313e7e7c206ef9d831a8fab07c1ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:33:2f:a9:30:b9:86:22:fe:40:b4:f9:10:
8b:d3:b8:55:b6:ed:a5:7a:4f:77:8e:47:16:72:40:
b3:54:09:ad:fb:eb:bc:e3:2d:8d:17:54:ef:1a:a2:
be:cc:b2:a9:3e:59:91:c7:d8:7c:36:16:73:5f:ae:
c0:3a:89:28:02:20:11:be:4c:34:84:06:b0:92:28:
69:19:58:ef:1c:80:0d:75:66:e5:49:c1:bc:f0:c1:
e5:fd:0e:06:e6:1a:e2:05:d5:60:2e:34:33:83:81:
0f:37:82:cf:ed:2a:00:c6:2c:24:75:aa:4b:b8:fc:
01:28:69:89:e9:91:13:59:c2:5c:54:bf:27:5d:cf:
31:cd:0d:e6:56:de:23:1e:5a:d4:d6:a8:2e:7a:29:
bc:ca:76:77:8e:61:a9:56:31:bb:4a:18:2e:17:84:
d9:82:95:25:5f:72:70:90:90:45:a7:65:43:ef:9f:
b7:05:34:93:9c:1a:f5:f8:2e:1f:a6:cc:56:0f:41:
4b:00:40:aa:de:24:38:9f:90:2e:c8:2f:5b:ee:fc:
a0:8e:04:10:51:83:0e:38:fc:0f:42:bf:fa:58:2d:
fc:3d:c4:5d:bc:5d:03:5e:30:24:8e:2e:a3:49:6b:
0e:8c:4f:d1:cb:ed:71:ea:36:0e:3f:1f:b5:ef:48:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:FB:46:B3:13:E7:E7:C2:06:EF:9D:83:1A:8F:AB:07:C1:EF:09
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6e:1a:15:0e:4d:d1:de:af:ce:34:be:fb:6c:be:93:95:0d:
e2:87:11:6f:fd:60:ff:87:bd:f8:1e:74:ba:24:9e:1e:fc:ab:
b0:97:3d:7e:a2:c3:ef:7b:d4:f5:7e:81:60:17:a0:73:9e:11:
49:32:97:1e:e1:2a:96:8f:c7:ed:bf:63:69:c9:81:b9:cb:9a:
55:3c:35:38:6d:8d:92:04:ce:ef:45:81:2e:1d:85:07:82:c0:
3c:68:48:26:48:cc:fe:e8:33:cb:a8:7f:dc:3d:bc:a4:f7:30:
c5:27:99:38:e6:27:c2:a5:8a:f5:07:fd:38:a0:a0:9d:03:0c:
a7:50:3d:44:91:28:f9:81:e8:46:57:bf:5d:ab:9c:98:45:98:
70:8b:d1:2b:0a:eb:ad:48:06:a5:e5:40:37:40:c5:2c:7f:7a:
95:05:d1:fe:ef:7c:bb:36:de:5b:03:1e:43:3c:92:e5:b4:4d:
be:52:6f:f3:a3:ca:6a:33:50:f4:a3:cc:a9:3c:79:d4:da:c2:
d5:d3:42:ed:a4:74:e8:f5:45:fd:6d:af:36:0e:9f:ed:e0:f0:
16:20:a1:fe:95:ea:8c:8e:90:d5:38:4b:6a:02:5c:f1:b1:e7:
7d:74:c6:bd:da:d2:21:3c:04:29:3d:36:42:1b:f9:e3:88:f1:
c7:8d:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:42:47 2025 by rpki-client